>> ARCHIVE: 2016-04

Easy Social Share Buttons for WordPress version 3.2.5 suffers from multiple cross site scripting vulnerabilities.

WordPress CM Ad Changer plugin version 1.7.2 suffers from multiple cross site scripting vulnerabilities.

WordPress Unlimited Pop-Ups plugin version 1.4.3 suffers from multiple cross site scripting vulnerabilities.

C and C++ for OS suffers from filter bypass and script insertion vulnerabilities.

Negin Group CMS suffers from a remote SQL injection vulnerability.

The Ubiquiti Networks web application suffered from an XXE injection vulnerability.

Telisca IPS Lock 2 suffers from a bypass vulnerability that allows the locking of any phone with only a mac address. Metasploit module included.

Texas Instruments Calculators Emulator version 3.03 buffer overflow exploit that can use custom offsets.

Django CMS version 3.2.3 suffers from a cross site scripting vulnerability.

Rough Auditing Tool for Security (RATS) version 2.3 crash proof of concept code that results in a denial of service.